Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
File: DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft (raw, json)
Hash identifier: wLNd+yvamWAoEmOsRRiQ4jzC0zKJIcKmzUtc1m2fd9o=
Subject key identifier: 9A:4E:1F:8C:3E:17:BA:00:2E:51:9B:93:43:AE:2A:D2:F4:EF:4B:5E
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Certificate issuer: /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial: 019E1F113529D70895AD09C3704D8F43D6F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
Manifest number: 1213
Signing time: Wed 13 May 2026 02:01:21 +0000
Manifest this update: Wed 13 May 2026 02:01:21 +0000
Manifest next update: Thu 14 May 2026 02:01:21 +0000
Files and hashes: 1: DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl (hash: cMcjGFk/lbyM1uTUAq6jtj/YtBPnYwJlQns62wTsy3w=)
2: SxljHk2cGiaCqx7oBYorH1FyNLM.roa (hash: X0K5Gb0sXyJIajhaLNptLUdlUrzJv1KHea1ZlF2NI+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:35:29:d7:08:95:ad:09:c3:70:4d:8f:43:d6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Validity
Not Before: May 13 02:01:21 2026 GMT
Not After : May 14 02:01:21 2026 GMT
Subject: CN=9a4e1f8c3e17ba002e519b9343ae2ad2f4ef4b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:41:ed:9b:cd:15:c1:08:ab:f8:27:99:c7:3b:
20:63:d6:f3:0b:fc:cf:58:02:36:df:c8:ca:9b:f8:
f1:11:21:0c:6d:0e:8e:73:ab:5d:92:85:54:66:52:
d4:37:c9:b8:b2:ce:54:30:e3:03:64:05:5b:09:aa:
32:60:71:21:7a:99:d8:d5:37:7f:ee:f0:9d:78:0c:
6a:17:62:9b:fe:8a:2e:67:28:53:b5:57:d9:b4:12:
f7:88:a6:3a:0f:8e:dc:c8:f5:92:82:90:5a:4b:b3:
ec:a3:ba:2c:af:ab:90:a4:74:0a:9e:51:2d:5f:39:
71:98:e7:cc:f5:5d:d9:eb:19:a7:b0:56:9f:a0:36:
88:92:91:e9:f9:63:73:4d:2e:b6:0e:26:aa:48:74:
b7:e7:0c:03:d0:12:fa:41:a0:86:b4:2a:df:ba:b4:
ee:27:f8:0c:27:e1:cf:34:80:7f:46:8d:14:a6:b3:
50:8d:9b:bd:42:ab:d7:a2:a0:4e:f7:b1:a1:8b:b1:
55:7c:97:be:59:f1:bc:07:45:9b:04:b0:7e:67:9f:
c4:bf:95:22:7c:50:b8:b5:bd:b0:b1:cb:62:43:cf:
a9:3d:09:a1:03:97:33:85:57:fe:3e:2d:ef:a8:a6:
d9:94:63:14:57:b4:19:09:8b:59:cf:e1:ea:a8:65:
57:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4E:1F:8C:3E:17:BA:00:2E:51:9B:93:43:AE:2A:D2:F4:EF:4B:5E
X509v3 Authority Key Identifier:
keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:10:08:50:3d:e0:d5:c7:b4:11:77:08:81:31:10:cd:85:88:
d7:e5:87:ee:ca:98:2d:17:2a:fe:b4:9b:6f:8c:31:f8:c5:91:
8c:69:29:e7:e0:16:63:00:cd:47:37:91:49:21:98:56:9a:12:
c0:07:4b:f9:3a:24:24:68:d0:dd:d6:fe:22:32:6f:54:66:ff:
fd:99:e3:5a:e2:d2:0c:5f:d4:5c:1a:c5:50:4a:b9:89:41:76:
79:7b:1d:92:a6:fa:db:52:cc:69:6c:35:1d:3e:08:62:cf:08:
87:a6:93:d9:a7:4c:49:1d:5d:49:05:64:30:bc:9b:ea:6a:fc:
b4:ee:33:17:8b:74:e1:a5:03:b9:2b:94:49:ed:98:04:fe:16:
fe:3f:e4:3f:9f:11:23:48:d6:22:0c:5d:42:bf:f4:50:d6:36:
1b:02:f1:f4:12:7d:a4:8f:2f:ae:a1:84:de:fc:72:68:4e:bf:
92:1d:f6:b1:b1:64:c5:40:64:f8:62:f0:f7:d5:1e:ab:95:97:
88:a1:33:54:57:08:33:65:6f:30:d5:c6:c2:1d:19:45:34:46:
cb:53:e8:2b:61:24:0e:c9:f3:c5:8a:93:1e:bb:73:2b:fc:c4:
8a:b0:36:2b:98:4a:f1:60:cd:af:4c:fe:d3:20:ec:22:cd:43:
30:ad:4c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:37 2026 by rpki-client